HTB Remote Walkthrough

The Cyber Outpost

6 min read

·

Jun 8, 2025

--

Share

In this article, we’re going to explore the retired easy box of Remote, following the guided mode.

Task 1: What service runs on port 2049?

Let’s start by running an nmap scan.

sudo nmap -sSCV 10.10.10.180 -p- --min-rate=1000 -oA remote-nmap

And we get the results:

However, we haven’t gotten the specific service we’re looking for, so let’s run nmap again on port 2049.

Answer: mountd

Task 2: Before we proceed enumerating other services, nmap reveals that anonymous login is allowed for FTP. How many files are available over anonymous FTP?

Let’s login to ftp, and see what we can get.

ftp anonymous@10.10.10.180

We will be prompted for a password, but we can leave that blank and hit enter.

Once we’re in, we can try to list the files in the directory, but there’s nothing found.

Answer: 0

Task 3: On TCP port 80 we can see a web store. What is the name of the content management system (CMS) present on Remote?

Let’s browse to the webpage.